CVE-1999-1080: High severity Sun SunOS vulnerability
rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could allow local users with physical access to gain root privileges by mounting a floppy or CD-ROM that contains a setuid program and running volcheck, when the file systems do not have the nosuid option specified in rmmount.conf.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Add the 'nosuid' mount option to the removable-media entries in /etc/rmmount.conf so that rmmount mounts floppy/CD-ROM (and other removable) file systems with the nosuid flag set.
rmmount (rmmount.conf) nosuid option = nosuid - Compensating control
Restrict physical access to the machine and/or block use of removable media (floppy, CD-ROM) until rmmount.conf is updated to enforce nosuid, to prevent local users with physical access from mounting media and gaining privileges.
- Operational
Audit /etc/rmmount.conf and currently-mounted removable file systems; for mounts that should be nosuid, remount them with the nosuid option or unmount them and avoid running 'volcheck' on untrusted removable media until the nosuid setting is applied.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1080?
CVE-1999-1080 is considered a high severity vulnerability due to its potential to allow local users to gain root privileges.
How do I fix CVE-1999-1080?
To mitigate CVE-1999-1080, ensure that file systems are mounted with the nosuid flag and validate that all system updates and patches are applied.
Who is affected by CVE-1999-1080?
CVE-1999-1080 affects users of SunOS 5.7, particularly those with physical access to the system.
What type of vulnerability is CVE-1999-1080?
CVE-1999-1080 is a privilege escalation vulnerability that arises from improper handling of the nosuid mount option.
Is there a risk of exploit with CVE-1999-1080?
Yes, if successfully exploited, CVE-1999-1080 allows local users to execute setuid programs with root privileges, posing a significant security risk.